Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.cer (raw, json)
Hash identifier:          g0CznX2K8SZhwvDNGkKNRoSjqc0P/W0zSZtcBFzry5M=
Subject key identifier:   2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01ADF6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Jul 2023 21:53:32 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 139227
                          IP: 103.140.24.0/23
                          IP: 2404:f640::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 17:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110070 (0x1adf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  3 21:53:32 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:42:70:3a:c0:b1:a8:91:f8:86:eb:a5:a5:
                    61:35:84:ea:b6:25:7b:64:ed:79:a0:24:5d:3c:d0:
                    64:52:a9:b9:bd:60:ba:45:c0:69:63:8a:76:4c:c8:
                    f4:24:cf:33:4d:39:fd:e3:a0:d3:8b:a8:73:3c:0e:
                    e2:f4:3a:09:2b:bb:ed:2b:f2:99:a8:cf:ae:b5:ba:
                    ba:e9:ac:bd:9f:67:33:7c:14:a5:c1:2e:8e:40:68:
                    2d:78:1a:f2:b5:06:37:fe:49:3f:ec:ca:1b:c5:55:
                    28:9d:4b:f9:09:d6:4e:8b:2b:1c:25:24:44:53:e4:
                    ff:94:4a:df:e8:78:14:51:13:d3:5f:f2:e6:a5:54:
                    6f:6f:ac:bf:13:52:1e:ad:c4:8c:26:38:ca:93:65:
                    c9:55:fd:0c:77:75:97:d5:b4:7a:54:f1:5f:28:2c:
                    44:0e:53:2c:4c:e0:8c:ee:2c:ba:5b:a4:60:4f:89:
                    a6:ef:a5:c6:21:c3:e5:d0:29:48:ff:13:40:8e:b8:
                    be:47:d2:0b:5c:59:e5:fa:b1:f9:b9:cd:ba:ff:8b:
                    69:11:ed:36:34:67:88:14:8b:bb:c5:b9:d9:33:ea:
                    ee:74:99:f0:4c:30:77:1e:f8:6e:99:e3:73:05:2c:
                    fb:5c:e8:60:ad:70:09:bc:39:6c:11:df:82:8a:2d:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139227

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.24.0/23
                IPv6:
                  2404:f640::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:82:da:7e:04:fe:ca:75:7d:cd:23:c2:6a:e7:73:c2:de:
         14:f3:17:a6:7e:ce:e6:6c:cc:4b:02:ce:d7:33:f8:dc:93:f6:
         18:23:3e:de:54:31:dd:9a:9e:64:18:ae:6b:14:fd:67:c9:1c:
         4c:0d:2a:eb:2d:3c:3a:21:11:ed:1a:f3:79:37:a5:20:9a:8e:
         c7:54:70:3d:d7:13:fe:94:71:1b:c8:0d:26:03:83:7f:eb:1a:
         24:ca:be:b2:86:0e:8f:92:8f:d7:01:83:84:f1:83:27:bd:09:
         4b:7d:63:5e:1b:29:17:d4:14:c5:11:8f:03:0e:27:06:4f:0d:
         98:22:07:76:69:97:96:5c:ad:71:a2:7d:5e:ef:f1:e1:44:5c:
         d1:af:f8:18:fb:c7:44:d9:b7:7d:4a:54:97:90:25:e2:b3:a2:
         98:82:d0:93:44:fd:53:f8:2a:7a:fc:5b:7d:65:ca:6e:60:4d:
         cc:9b:fc:49:ef:0d:9b:26:b0:e1:81:bf:9d:56:af:5c:64:25:
         5d:12:53:b4:a6:42:42:0b:7f:49:96:92:be:90:43:5b:48:2e:
         f3:2c:30:1c:15:8c:97:40:78:57:e1:9a:91:8d:5e:25:30:ea:
         7d:49:20:b1:b3:bd:0d:97:4f:08:f1:91:b1:62:dd:c0:39:7a:
         49:e6:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:37:09 2024 by rpki-client on console-ams.rpki-client.org